Pharming is a blended attack form, involving spyware, DNS poisoning, URL spoofing or domain hijacking and Trojans. It alters the DNS addresses, directing users to fake mirror sites that are specifically created to collect confidential data that is later used to perpetrate financial fraud. DNS poisoning is carried out either on the DNS servers over the Internet or in the host file of the user’s PC. Emailed viruses like the Banker Trojan can be used to rewrite local host files.
|